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RECEIVED 
CENTRAL FAX CENTER 

Please CANCEL claims 9 and 17. JUN 2 I 2007 

Please AMEND the CLAIMS as follows: 

1 . (Currently Amended) In a network device, a method of performing NAT, 
comprising: 

maintaining a plurality of routing tables, each of the plurality of routing tables being 
associated with a different one of a plurality of v irtual private networks network ; 

receiving a packet, the packet including an IP source address and an IP destination 
address, the packet further including information indicating one of the plurality of routing 
tables to route the packet; 

performing NAT on the packet; 

identifying one of the plurality of routing tabies to route the packet; 

identifying an entry in the one of the plurality of routing tables using the IP 
destination address; and 

routing the packet using the identified routing table entryi 

receiving a default route advertised bv a network device providing one or more 
chared services, wherein each of the shared services is available to each of the plurality of 
virtual pri vate networks: and 

updating each of the plurality of routing tables to include the default route to the 

network device pro ving nn e or more shared services available to each of the plurality of 
virtual private networks . 

2. (Currently Amended)The method as recited in claim 1 , wherein each of the v irtual 
private network networksis associated with a different customer. 
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3 . (Original) The method as recited in claim 1 , wherein the network device is 
associated with an ingress interface of a service provider network. 

4. (Original) The method as recited in claim 1 , wherein the network device is 
associated with an egress interface of a service provider network. 

5. (Original) The method as recited in claim 1 , wherein the network device is 
associated with a service provider network. 

6. (Currently Amended) In a network device, a method of p erforming NAT, 
comprising: 

maintaining a plurality of routing tables, each of the plur ality of routing tables being 

associated with a different, one of a plura lity of virtual private networks; 

receiving a packet, the packet including an IP source address and an IP destination 
address, the packet further including infor mation indicating one of the plurality of routing 
tables to route the packet^ 

performing NAT on the packet: 

iden tifyin g one of the plurality of routing tables to route the packet; 
identifying an entry in the one of the plurality of routing tables using the J ? 

destination address: and 

routing the packet using the identifie d routing table entry; 

?hc mothod - as recit e d in elaim h wherein performing NAT on the packet comprises: 
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translating the IP source address from a private address to a public address when the 
packet is received from a network device in a private network. 

7. (Currently Amended) In a network d evice, a method of performing NAT, 
comprising: 

maintaining a p jra ftlitv of routing tables, each of the plurality of routing tables being 

associated with a different one of a plurality of virtual private networks: 

receiving a packet the packet Including an IP source address and an IP destination 

address, the packet furthe^includii^ information in dicating one of the plurality of routing 
tables to route the packet: 

performing NAT on the packet; 

identifying one of the plurality of routing tables to routejhe packet; 

identifying an entry in the one of the plurality of routing tables using the IP 

destination address: and 

routing the packet using the identified routing table entry; 

The mothod as recit e d in clcu flft4? wherein performing NAT on the packet comprises: 

translating the IP destination address from a public address to a private address when 
the packet is received from a network device in a public network. 

8. (Currently Amended) The method as recited in claim 7 9 wherein the network device 
in the public network provides one or more services to each of the virtual private networks 
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9. (Cancelled) 

10. (Currently Amended) In a network device, a method of performing NAT, 
comprising; 

maintaining a plurality of routing tables, each of the plurality of Touting tablesJb&ing 

associated with a different one of a plurality of virtual private networks; 

receiving a packet the packet including an IP source address and an IP destination 

address, the packet further including information indicat ing one of the plurality of routing 

tables to route the packet 

performing NAT on the packet: 

identifying one of the plurality of routing tables to route the packet; 

identifying an entrv in the one o f the plurality of routine tables using the IP 

HAgtmflti on address: and 

routing the pack et using the identified routing table entry; 

The m e thod as rooited in claim- H wherein the packet includes an MPLS tag indicating a 
virtual private network, and wherein identifying one of the routing tables comprises: 
ascertaining the virtual private network from the MPLS tag; and 
identifying the one of the routing tables associated with the virtual private network. 

1 1 . (Original) The method as recited in claim 1 0, wherein the MPLS tag further 
identifies the network device responsible for performing NAT and routing the packet. 

12. (Currently Amended) In a network device, a method of pe rforming NAT. 
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comprising: 

maintaining a plurality of routing tables, each of the plurality of routing tables being 

associated with a different one of a plurality of virtual private networks: 

receiving a packet the packet including an IP source address and an IP destination 
address, the packet farther including information indicating one of the plurality of routing 
tables to route the packet: 
performing NAT on the packet; 

identifying one of the plurality of Touting tables to route the packet: 

identifying an entry in the one of the plurality of routing tables using the IP 

destination address: and 

ratin g the packet using the identified routing table entry; 
Tho meth o d as recit e d in claim 1, - wherein the packet includes an MPLS tag indicating a 
virtual private network, and wherein performing NAT on the packet comprises: 

ascertaining the virtual private network from the MPLS tag; 

identifying an entry in a translation table including the IP source address, the IP 
destination address, and a virtual private network identifier identifying the virtual private 
network; and 

performing NAT on the packet using the entry in the translation table. 

13. (Original) The method as recited in claim 12, wherein identifying one of the 
routing tables to route the packet comprises: 

identifying the one of the routing tables from the entry in the translation table. 

14, (Currently Amended) In a network device, a method of performing NAT, 
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comprising: 

maintaining a plurality of sets of touting information, each of the sets of routing 
information being associated with a different one of a pluralityLof virtual private petworks 

receiving a packet, the packet including an IP source address and an IP destination 
address, the packet further including information indicating one of the plurality of sets of 
routing information r outing tables to route the packet; 

performing NAT on the packet; 

identilying an entry in one of the sets of routing information using the IP destination 
address; aed 

routing the packet using the identified routing table entryvi 

receiving a default route advertised bv a network device provid ing one or more 

shared services, wherein each of the shared services is available to each of the plurality of 

virtual private networks; and 

updating the plurality of sets of routing in formation to include the default route to the 

network device providing one or more shared services availab le to each of the plurality of 

virtual private networks, 

15. (Currently Amended) The method as recited in claim 14, wherein each of the sets of 
routing information corresponding to each of the plurality of v irtual private networks 
network is stored in a separate routing table. 

16. (Currently Amended) The method as recited in claim 14> wherein each of the sets of 
routing information corresponding to each of the v irtual private notvwris networks is stored 
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in a single routing table, wherein each entry in the routing table includes a VPN identifier 
identifying the corresponding one of the v irtual private networks networ k. 

17. (Cancelled) 

18- (Currently Amended) The method as recited in claim 14 4-7, wherein updating the 
sets of routing information comprises: 

updating a single routing table to include the default route. 

19. (Currently Amended) The method as recited in claim 1 8, wherein the single routing 
table is dedicated to storing the default routes route t o shared services available to each of the 
virtual private networks n e twork . 

20. (Original) The method as recited in claim 18, wherein the single routing table stores 
the sets of routing information. 

2 1 . (Currently Amended) The method as recited in claim 14 wherein updating the 
sets of routing information comprises updating a plurality of routing tables to include the 
default route, each of the plurality of routing tables being associated with a different one of 
the v irtual private networks n etwork . 

22. (Currently Amended) A computer-readable medium storing thereon computer- 
readable instructions for performing NAT in a network device, comprising: 

instructions for maintaining a plurality of routing tables, each of the plurality of 
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routing tables being associated with a different one of a plurality of v irtual private networks 
ne t work ; 

instructions for receiving a packet, the packet including an IP source address and an 
IP destination address, the packet further including information indicating one of the 
plurality of routing tables to route the packet; 

instructions for performing NAT on the packet; 

instructions for identifying one of the plurality of routing tables to route the packet; 

instructions for identifying an entry in the one of the plurality of routing tables using 
the IP destination address; and 

instructions for routing the packet using the identified routing table entryi 

receiving a default route advertised bv a network device providing one or more 

shared services, wherein each of the shared services is available to each of thq pluralit y pf 
virtual private networks: and 

updating each of the plurality of routing tables to include t he default route to the 
network device providing one or m o re shared services available to each of the plurality of 
virtual private networks. 

23. (Currently Amended) A network device adapted for performing NAT, comprising: 
means for maintaining a plurality of routing tables, each of the plurality of routing 

tables being associated with a different one of a plurality of v irtual private networks network ; 
means for receiving a packet, the packet including an IP source address and an IP 

destination address, the packet further including information indicating one of the plurality of 

routing tables to Toute the packet; 

means for performing NAT on the packet; 
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means for identifying one of the plurality of routing tables to route the packet; 

means for identifying an entry in the one of the plurality of routing tables using the IP 
destination address; a»4 

means for routing the packet using the identified routing table entry; 

receiving a default route advertised by a network device providing one or more 

shared services, wherein each of the shared services is available to each of the plurality of 
virtual private networks: and 

updating each of the plurality of routing tables to include the default route to the 

network device providing one or more shared serv ices available to each of the plurality of 
virtual private networks , 

24, (Currently Amended) A network device adapted for performing NAT, comprising: 
a processor; and 

a memory, at least one of the processor and the memory being adapted for; 

maintaining a. plurality of routing tables, each of the plurality of routing tables being 
associated with a different one of a plurality of v irtual private networks n e twetfk ; 

receiving a packet, the packet including an IP source address and an IP destination 
address, die packet further including information indicating one of the plurality of routing 
tables to route the packet; 

performing NAT on the packet; 

identifying one of the plurality of routing tables to route the packet; 
identifying an entry in the one of the plurality of routing tables using the IP 
destination address; and 

routing the packet using the identified routing table entryj, 
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receiving a default route advertised by a network device providing one or more 

shared services, wherein each of the shared services is available to each of the plurality of 
virtual private networks; and 

updating each of the plurality of routing tables to include the default route to the 

network device prov ^din p one or more shared services available to each o f the plurality of 
virtual private networks . 
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